4 comments

  • throwoutway 1 hour ago
    Yesterday ProPublica and ArsTechnica published a takedown of Azure: "Federal cyber experts called Microsoft’s cloud a “pile of shit,” approved it anyway" ...

    https://arstechnica.com/information-technology/2026/03/feder...

  • kjellsbells 8 minutes ago
    Puts me in mind of this scathing report from CISA on how a state-sponsored group broke into Microsoft and then into the State Department and a bunch of other agencies. Reads like a heist movie.

    https://www.cisa.gov/sites/default/files/2024-03/CSRB%20Revi...

    What I found most incredible about the story is that it wasn't Microsoft who found the intrusion. It was some sysadmin at State who saw that some mail logs did not look right and investigated.

  • ronbenton 1 hour ago
    Bypassing logging feels relatively unimportant compared to some of the recent EntraID vulns we’ve seen
    • ares623 4 minutes ago
      It takes a village of exploits to raise a successful and undetected attack.
  • iam_circuit 27 minutes ago
    [dead]